Legal

Privacy Policy

Effective: July 4, 2026 · Last updated: July 4, 2026

This Privacy Policy explains how LCG Studios, LLC ("we," "us," or "our") collects, uses, discloses, and protects information when you use STRATOS and related services available at https://stratossuite.com (collectively, the "Service"). By using the Service, you agree to the practices described in this Policy.

Important notice: This Privacy Policy is provided for informational purposes. It is not a substitute for legal advice. If you have specific legal concerns about your data, we recommend consulting a qualified attorney.

1. Who We Are

LCG Studios, LLC is the developer and operator of STRATOS, a Software-as-a-Service (SaaS) organizational management platform built for gaming organizations, esports teams, content creator studios, and broadcast media organizations. We are headquartered in Pennsylvania, United States.

For privacy inquiries, you may contact us at: contact@legioncollectivegaming.com

2. Information We Collect

2.1 Information You Provide Directly

Account Information: Full name, username, email address, and password when you create an account.
Profile Information: Job title, department, role, social handles, and profile photo you choose to add.
Organization Data: Organization name, department structure, member roster, and related operational data entered by organization administrators.
Billing Information: Payment method details collected and processed by our payment processor, Stripe. We do not store full credit card numbers on our servers.
Communications: Messages, notes, bug reports, and support requests you submit through the Service.
Content: Projects, tasks, content pipeline items, training materials, and other content you create or upload.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, clicks, navigation paths, and time spent within the Service.
Device Information: IP address, browser type, operating system, device identifiers, and screen resolution.
Log Data: Server logs including access times, error logs, and API request records.
Authentication Data: Login timestamps, session tokens, and multi-factor authentication records.
Mobile App Data: If you use the STRATOS mobile app, we collect device type, operating system version, crash reports, and app usage patterns. Biometric data (Face ID / Touch ID) is processed entirely on your device by Apple and is never transmitted to or stored by our servers.

2.3 Information From Third Parties

Payment Processing: Stripe provides us with transaction confirmation, subscription status, and billing identifiers. We receive only non-sensitive payment summary data.
Authentication Providers: If you use single sign-on features, we may receive basic profile information from the identity provider.

3. How We Use Your Information

We use the information we collect for the following purposes:

Providing the Service: To create and maintain your account, authenticate users, process payments, and deliver the core features of STRATOS.
Organization Management: To enable administrators to manage members, departments, projects, and content within their organization.
Communications: To send transactional emails (account verification, password resets, billing receipts, security alerts, and system notifications). We do not send marketing emails without your explicit consent.
Security and Fraud Prevention: To monitor for unauthorized access, enforce our Terms of Service, and protect the integrity of the platform.
Service Improvement: To analyze usage patterns, fix bugs, and improve features. Crash reports and error logs are used solely for platform stability.
Legal Compliance: To comply with applicable laws, court orders, and regulatory requirements, including the Pennsylvania Breach of Personal Information Notification Act (BPINA).
Customer Support: To respond to your inquiries, bug reports, and support requests.

We do not sell your personal information. We do not use your personal information for targeted advertising. We do not use your data to train AI or machine learning models.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

4.1 Within Your Organization

Information you provide within STRATOS — including your name, title, department, and activity — is visible to other authorized members of your organization as determined by your organization's administrators and your role-based access level.

4.2 Service Providers (Sub-Processors)

We share information with trusted third-party vendors who help us operate the Service. These vendors are contractually required to use your information only for the purposes we specify and to implement appropriate security measures.

Vendor	Purpose	Data Shared
Supabase	Database hosting & authentication	All platform data
Stripe	Payment processing & billing	Name, email, billing data
Vercel	Web hosting & delivery	Request logs, IP addresses
Expo / EAS	Mobile app build & delivery	App usage, crash reports

4.3 Legal Requirements

We may disclose your information if required by law, legal process, or government request, including to comply with Pennsylvania's Breach of Personal Information Notification Act. We will notify affected users of required disclosures to the extent permitted by law.

4.4 Business Transfers

If LCG Studios is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is subject to a materially different privacy policy.

4.5 With Your Consent

We may share your information in other ways with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to provide the Service and comply with our legal obligations:

Active accounts: Retained for the duration of your subscription and organization membership.
Cancelled accounts: Account data is retained for 90 days after cancellation to allow account recovery, then deleted or anonymized.
Billing records: Retained for 7 years as required by financial regulations.
Security logs: Retained for 12 months for security monitoring and incident investigation.
Backup data: Encrypted backups may persist for up to 30 days after deletion requests before being fully purged from all systems.

6. Data Security

We implement technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction:

All data is encrypted in transit using TLS 1.2 or higher.
Data at rest is encrypted using AES-256 encryption via Supabase.
Access to production systems is restricted to authorized personnel only.
Multi-factor authentication is available and encouraged for all accounts.
Emergency lockdown capabilities allow platform administrators to immediately restrict access in the event of a suspected security incident.
Security events are logged and monitored in real time.

In the event of a data breach affecting Pennsylvania residents, we will notify affected individuals and the Pennsylvania Attorney General as required under the Breach of Personal Information Notification Act (73 P.S. § 2301 et seq.), without unreasonable delay and no later than 60 days from discovery.

No method of transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on where you are located, you may have certain rights regarding your personal information. We honor these rights for all users regardless of location.

7.1 Access and Portability

You may request a copy of the personal information we hold about you. We will provide this in a portable, machine-readable format within 45 days of your request.

7.2 Correction

You may update or correct your personal information at any time through your account settings or by contacting us.

7.3 Deletion

You may request deletion of your personal information. We will delete or anonymize your data within 30 days, except where retention is required by law (such as billing records) or where data is part of your organization's records controlled by your organization administrator.

7.4 Opt-Out of Non-Essential Communications

You may opt out of non-transactional communications at any time by contacting us. Transactional emails (security alerts, billing receipts, account notifications) are required for operation of the Service and cannot be disabled while your account is active.

7.5 California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to know what personal information we collect, use, disclose, and sell.
Right to delete your personal information.
Right to correct inaccurate personal information.
Right to opt out of the sale or sharing of personal information. (We do not sell or share personal information for advertising purposes.)
Right to non-discrimination for exercising your CCPA rights.
Right to limit use of sensitive personal information. (We do not use sensitive personal information for purposes beyond providing the Service.)

To exercise California rights, contact us at contact@legioncollectivegaming.com. We will respond within 45 days.

7.6 EU / EEA / UK Residents (GDPR)

If you are located in the European Union, European Economic Area, or United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR:

Right to access your personal data.
Right to rectification of inaccurate data.
Right to erasure ("right to be forgotten").
Right to restriction of processing.
Right to data portability.
Right to object to processing.
Right to withdraw consent at any time where processing is based on consent.
Right to lodge a complaint with your local supervisory authority.

Our legal basis for processing your personal data is: (a) performance of a contract (providing the Service); (b) legitimate interests (security, fraud prevention, service improvement); and (c) legal obligation (compliance with applicable law).

8. Cookies and Tracking Technologies

STRATOS uses essential cookies and similar technologies to operate the Service. These include:

Authentication cookies: Required to maintain your logged-in session. Cannot be disabled while using the Service.
Security cookies: Used to detect and prevent fraudulent activity.
Preference cookies: Used to remember your settings and preferences within the platform.

We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies that share your data with advertisers. STRATOS products are ad-free.

9. Children's Privacy

STRATOS is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child under 13 has provided information to us, please contact us at contact@legioncollectivegaming.com.

Users between the ages of 13 and 17 may use STRATOS only with the consent and involvement of a parent or legal guardian and only as permitted by their organization's administrator.

10. International Data Transfers

STRATOS is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For users in the EU/EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for transferring personal data to the United States, to the extent required by applicable law.

11. Pennsylvania Residents

LCG Studios, LLC is headquartered in Pennsylvania. While Pennsylvania does not currently have a comprehensive consumer data privacy law (as of the effective date of this Policy), we are committed to compliance with all applicable Pennsylvania laws, including:

Breach of Personal Information Notification Act (BPINA): In the event of a security breach affecting your personal information, we will notify you and, if applicable, the Pennsylvania Attorney General without unreasonable delay and within 60 days of discovering the breach.
Unfair Trade Practices and Consumer Protection Law (UTPCPL): We comply with Pennsylvania consumer protection laws prohibiting deceptive data practices.

We will update this Policy promptly if Pennsylvania enacts comprehensive consumer privacy legislation (such as HB 78 / CDPA) that imposes additional obligations.

12. Third-Party Links and Services

The Service may contain links to third-party websites, social media platforms, or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through STRATOS.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

Update the "Last Updated" date at the top of this page.
Notify registered users by email at least 14 days before material changes take effect.
Display a prominent notice within the STRATOS platform.

Your continued use of the Service after the effective date of an updated Policy constitutes your acceptance of the changes.

14. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

LCG Studios, LLC

Pennsylvania, United States

Email: contact@legioncollectivegaming.com

Website: https://stratossuite.com

We will respond to privacy requests within 30 days. For California residents, we will respond within 45 days as required by CCPA.

This Privacy Policy was last updated on July 4, 2026. The previous version is available upon request. This policy applies to STRATOS web platform (https://stratossuite.com) and the STRATOS mobile application (com.lcgstudios.stratos).